A hotfix rollup package (build 4.0.3617.2) is available for Microsoft Forefront Identity Manager (FIM) 2010. This update resolves several issues and adds several features that are described in the "More Information" section. Additionally, this update contains all servicing fixes that were made since the release of FIM 2010.

Microsoft Update

Microsoft Update Catalog

Microsoft Support

If this update is available for download from Microsoft Support, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix. Additionally, you can obtain the update from Microsoft Update or from Microsoft Update Catalog.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, go to the following Microsoft website:

File information

The global version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

This update also fixes the following issues or adds the following features that were not previously documented in the Microsoft Knowledge Base.

Issues that are fixed in Sync Engine

Issue 1

Fixes a memory leak in Extensible Connectivity Management Agent (ECMA) 2.0. The memory leak occurs when a connector that was built by using ECMA 2.0 exports many objects.

Issue 2

Fixes an issue in which the Refresh schema button is sometimes not correctly enabled for packaged Extensible Connectivity Management Agent (ECMA) 2.0 connectors.

Issue 3

Fixes an issue in which Extensible Connectivity Management Agent (ECMA) 1.0-based connectors do not function correctly if encrypted parameters are used.

Issue 4

Fixes an issue that occurs when you have organizational unit (OU) provisioning enabled in an Active Directory Management Agent (AD MA) before you upgrade to Update Rollup 2 (build 4.0.3606.2). In this scenario, you always receive the following error message when you try to synchronize:

The mapping for dn component 'ou' to object type 'organizationalUnit' is not in the list of allowed component mappings.

Issues that are fixed in Setup

Issue 1

Fixes an issue in which the database upgrade sometimes fails with Update Rollup 2 (build 4.0.3606.2).

Issue 2

Fixes an issue that may cause a failure when you try to remove or change the installation of Forefront Identity Manager. This issue may occur when Setup is first run by using a nondefault Microsoft SharePoint site URL (for example, a URL to a server that is not the local host or to a server that uses SSL). This issue also causes a major upgrade to fail at the removal stage.